dasHost.exe is causing udp broadcast flood on 22222 or 10004 ports...

Anonymous
2024-10-16T07:33:40+00:00

Hi i have problem with Device Association Framework Provider Host..

I checked das host is running from right place C:\Windows\System32

Its signed by ms.

How to stop it? It is hundreds broadcast connections per miute..

System is updated, antivirus is working.

Windows for home | Windows 11 | Internet and connectivity

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

61 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-05-06T06:17:07+00:00

    GOOD NEWS!

    MS confirmed this problem and will fix it with patches, release in July.2025 etc

    Source?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2025-05-06T02:35:52+00:00

    GOOD NEWS!

    MS confirmed this problem and will fix it with patches, release in July.2025 etc

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2025-04-15T10:11:40+00:00

    Hi All,

    Thanks for your helpful post. It's worked for me.

    • Add reg and restart comp, It's Done.
      [HKEY_CURRENT_USER\Software\Microsoft\Print\UnifiedPrintDialog]
      DWORD 32-bit named "PreferLegacyPrintDialog"1

    No more UDP BC Flood.

    Kind Regards.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  4. Anonymous
    2025-03-24T08:53:40+00:00

    Same issue here; as more clients gets updated the broadcast storm increases. We were able to "quick fix" it, using the registry "hack" and deploying it with the gpo. Nevertheless now we need to track, once MS fixes this issue in the back, so the registry hack can be removed.

    wish to see the the internal dev ticket for this issue and the status of it :)

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2024-10-17T02:38:05+00:00

    Dear Pawel Bober,

    Thank you for reaching out about the issue with dasHost.exe causing a UDP broadcast flood on ports 22222 and 10004. I understand how frustrating this can be, and I’m here to assist you in resolving it.

    Here are some steps you can follow to address and mitigate this problem:

    Step 1: Monitor Network Activity Using Task Manager and Resource Monitor

    • Press Ctrl + Shift + Esc to open Task Manager.
    • Go to the Performance tab and click on Open Resource Monitor at the bottom.
    • Switch to the Network tab to view detailed network usage.
    • Confirm if dasHost.exe is indeed responsible for the excessive network activity.

    Step 2: Check and Disable the Device Association Service (if necessary)

    • Press Win + R, type services.msc, and press Enter.
    • Locate Device Association Service, right-click it, and select Properties.
    • Change the Startup type to Disabled, then click Apply and Stop the service.
    • This service is linked to device associations like printers or Bluetooth devices. Disabling it temporarily should stop the flood of UDP broadcasts.
    • You can always re-enable the service if needed.

    Step 3: Configure Group Policy to Prevent Device Installation

    • Press Win + R, type gpedit.msc, and press Enter.
    • Navigate to Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions.
    • Set up policies here to prevent unauthorized device installations, which might be malfunctioning and causing network floods.

    Step 4: Block UDP Ports Using Windows Firewall

    • Press Win + R, type firewall.cpl, and press Enter.
    • On the left pane, click Advanced settings.
    • In the Outbound Rules section, click New Rule….
    • Select Port and click Next.
    • Choose UDP, and specify the local ports 22222, 10004.
    • Select Block the connection, and apply the rule to all profiles (Domain, Private, Public).
    • Name the rule something like “Block dasHost UDP Broadcasts” and complete the setup.

    Restart your system for the changes to take effect. After that, monitor the network activity using Task Manager and Resource Monitor to ensure that the UDP broadcast has been significantly reduced.

    Please feel free to reach out again if the problem persists or if you need any further assistance.

    Best Regards,

    Martin | Microsoft Community Support Specialist

    Was this answer helpful?

    0 comments